Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

89f200ce63...5d.exe

windows7-x64

10

89f200ce63...5d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    89f200ce633ee12a5a10cdd6c68c39cb92e4b25448f257511d65c1718459645d

  • Size

    1.3MB

  • Sample

    250105-cgevfszlbj

  • MD5

    5140834e42c7790579a34b93220bb286

  • SHA1

    704a87e4bffacb3d2dfa83f8259703fbe148e979

  • SHA256

    89f200ce633ee12a5a10cdd6c68c39cb92e4b25448f257511d65c1718459645d

  • SHA512

    0ae172854eb297080be90a874c9f144a7f0a521254c7d28a35ba88713675fe959524277efc11f3012e673b2b1674277cb1bb564d53e8ad62f71b71ae9dcc5e63

  • SSDEEP

    24576:o4GHnHIzOagiyz09CtKIKrJbWtTNxGiON/8gR4rEH7K:fsHdagiyz09CoIqJbWtTjGiONEL

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      89f200ce633ee12a5a10cdd6c68c39cb92e4b25448f257511d65c1718459645d

    • Size

      1.3MB

    • MD5

      5140834e42c7790579a34b93220bb286

    • SHA1

      704a87e4bffacb3d2dfa83f8259703fbe148e979

    • SHA256

      89f200ce633ee12a5a10cdd6c68c39cb92e4b25448f257511d65c1718459645d

    • SHA512

      0ae172854eb297080be90a874c9f144a7f0a521254c7d28a35ba88713675fe959524277efc11f3012e673b2b1674277cb1bb564d53e8ad62f71b71ae9dcc5e63

    • SSDEEP

      24576:o4GHnHIzOagiyz09CtKIKrJbWtTNxGiON/8gR4rEH7K:fsHdagiyz09CoIqJbWtTjGiONEL

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks